You are designing an application delivery solution for an e-commerce website. You need SSL offloading, URL path-based routing (e.g., /images to one server pool and /video to another), and protection against SQL injection attacks. The application is hosted entirely in a single Azure region. Which service should you choose?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Azure Application Gateway with WAF

Azure Application Gateway is a regional layer 7 load balancer that supports URL path-based routing, SSL offloading, and includes a Web Application Firewall (WAF) to protect against...

📋Part of Microsoft Certified: Azure Network Engineer Associate (AZ-700) · Azure Certification Practice
Real Exam ScenarioApplication Gateway

You are designing an application delivery solution for an e-commerce website. You need SSL offloading, URL path-based routing (e.g., /images to one server pool and /video to another), and protection against SQL injection attacks. The application is hosted entirely in a single Azure region. Which service should you choose?

✓ Correct Answer & ExplanationApplication Gateway

Correct Answer

Azure Application Gateway with WAF

Why This Answer Is Correct

Azure Application Gateway is a regional layer 7 load balancer that supports URL path-based routing, SSL offloading, and includes a Web Application Firewall (WAF) to protect against common web exploits like SQL injection. Azure Front Door does this globally, but for a single region, App Gateway is the recommended service. Standard Load Balancer operates at layer 4.

📚 What This Question Tests

This question evaluates your knowledge of Application Gateway — a core concept tested in Microsoft Certified: Azure Network Engineer Associate (AZ-700). Understanding Application Gateway is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.

All Microsoft Certified: Azure Network Engineer Associate (AZ-700) Questions →Browse All Azure Exams →

More Application Gateway Practice Questions

Your Application Gateway is returning HTTP 502 (Bad Gateway) errors to clients. You suspect the backend servers are not responding correctly. Where should you look first to determine why Application Gateway considers the backend servers unhealthy?

← Back to Microsoft Certified: Azure Network Engineer Associate (AZ-700) Full Practice Hub